gstack-upgrade
Facilitates upgrading gstack to the latest version, detecting install types and summarizing new features for users.
Install this skill
Security score
The gstack-upgrade skill was audited on May 30, 2026 and we found 12 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 38 | ```bash |
Access to hidden dotfiles in home directory
| 41 | [ -z "$_AUTO" ] && _AUTO=$(~/.claude/skills/gstack/bin/gstack-config get auto_upgrade 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 55 | ~/.claude/skills/gstack/bin/gstack-config set auto_upgrade true |
Access to hidden dotfiles in home directory
| 77 | Tell user the snooze duration: "Next reminder in 24h" (or 48h or 1 week, depending on level). Tip: "Set `auto_upgrade: true` in `~/.gstack/config.yaml` for automatic upgrades." |
Access to hidden dotfiles in home directory
| 81 | ~/.claude/skills/gstack/bin/gstack-config set update_check false |
Access to hidden dotfiles in home directory
| 83 | Tell user: "Update checks disabled. Run `~/.claude/skills/gstack/bin/gstack-config set update_check true` to re-enable." |
Access to hidden dotfiles in home directory
| 163 | _TEAM_MODE=$(~/.claude/skills/gstack/bin/gstack-config get team_mode 2>/dev/null || echo "false") |
Access to hidden dotfiles in home directory
| 226 | mkdir -p ~/.gstack |
Access to hidden dotfiles in home directory
| 227 | echo "$OLD_VERSION" > ~/.gstack/just-upgraded-from |
Access to hidden dotfiles in home directory
| 228 | rm -f ~/.gstack/last-update-check |
Access to hidden dotfiles in home directory
| 229 | rm -f ~/.gstack/update-snoozed |
Access to hidden dotfiles in home directory
| 260 | ~/.claude/skills/gstack/bin/gstack-update-check --force 2>/dev/null || \ |